Memahami peran TI dan manajemen jaringan dalam pemulihan bencana

(1)

MEMAHAMI TENTANG DR

DENGAN--Mengembangkan flosof pemulihan

bencana

Jelaskan prinsip-prinsip dasar

perencanaan pemulihan bencana

Jelaskan dan membangun kesinambungan

bisnis dan pemulihan bencana fungsi

Memahami langkah-langkah perencanaan

pemulihan bencana

(2)

BENCANA DAN PEMULIHAN BENCANA

Bencana pemogokan

Kehidupan sehari-hari dipenuhi dengan insiden yang dapat

mengganggu bisnis

Sebuah rencana pemulihan bencana memungkinkan untuk:



_{Kelangsungan bisnis saat bencana}



_{Pemulihan operasi yang normal}

S U M B E R K E P U S T A K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / D I S A S T E R R E C O V E R Y / C H A P

(3)

MENGEMBANGKAN FILSAFAT DISASTER RECOVERY ?

Sebuah flosof pemulihan bencana berakar pada:o



_{Keinginan organisasi untuk melindungi dan}

melestarikan citra publik positif



_{Aset fsik organisasi}



Kehidupan para karyawan organisasi

Gambar mencakup:o



Tingginya kadar kepuasan pelanggan



Iman pemegang saham

(4)

ORGANIZATIONS AND DISASTERS

Many organizations have sufered

through a disaster

The ones that have not are not

immune

Out of 250 organizations surveyed,

three of every 10 organizations

surveyed for this book have been

through a disaster

(5)

DISASTER RECOVERY PLANNING

Proses menilai risiko bahwa organisasi

menghadapi :

Mengembangkan,

mendokumentasikan,

menerapkan, menguji, dan

memelihara prosedur

(6)

STATUS OF DISASTER RECOVERY

PLANNING

Nearly three of every four

organizations have a disaster

recovery plan in place

Disaster recovery planning is still a

new process in many organizations

S U M B E R K E P U S T A K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / D I S A

S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

(7)

DISASTER RECOVERING PLANNING PROCESS

Too many people consider disaster

recovery planning a mechanical process

There are certainly tedious and laborious

aspects to developing a plan

Organizations have cultures, spirits, and

images that permeate relationships with



The organization



Customers



Business partners

(8)

CUSTOMERS

A customer’s view of an organization is crucial

to the organization’s success

Marketing managers hope customers see

products as high quality and a good value

New customers are difcult and costly to gain

Less costly to keep current customers satisfed

Customer satisfaction is a prime marketing tool

A good public image is an asset that takes

years to achieve and considerable diligence

to maintain

(9)

STOCKHOLDER AND INVESTOR RELATIONS

Maintaining investor faith is extremely important

Institutional investor confdence is important

Considerable efort is exerted to develop the

faith and trust of investors

Eforts to maintain faith are less expensive than

those required to regain lost faith

Organizations want to be viewed in the most

positive light possible

(10)

DISASTER RECOVERY PLANNING

Intensifed since September 2001

Three of every 10 organizations surveyed

report that their spending for disaster

recovery planning has increased

One of every 10 organizations reports

that spending has increased

dramatically

S U M B E R K E P U S T A K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / D I S A S T E R R E C O V E R Y / C H A P T E R

(11)

(12)

PLANNING PRINCIPLES

A solid plan requires the support

and participation of



_{Upper-level management}



_{All business unit managers}



_{Legal counsel}



_{Directors of all functional departments such as}

Human Resources, Facilities Management, IT,

and Corporate security

Assessing risk requires time

consuming, detailed analysis

S U M B E R K E P U S T A K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / D I S A S T E R R E C O V E R Y / C H

(13)

PLANNING PRINCIPLES

All policies and procedures must



_{Support the critical needs of business operations}



_{Comply with all relevant laws and regulations}



_{Be understood by the parties responsible for}

implementing hem



_{Be approved by upper management}

(14)

PLANNING PRINCIPLES

The disaster recovery system must facilitate

and allow control of communications among



Decision makers



_Managers



_Staf



_{External support organizations}



Law enforcement



Emergency services



Media

All policies and procedures must be available

to all departments, managers, and staf

during response and recovery

(15)

PLANNING PRINCIPLES

All employees involved in disaster response

and recovery must be trained to



Implement documented procedures



_{Address unanticipated problems}

Procedures must be tested and rehearsed

Planners must continually evaluate new

threats and business conditions as they

develop

During disaster response and recovery, the

organization must



_{Evaluate the efectiveness of its procedures}

(16)

PROCESS OF DISASTER RECOVERY PLANNING

Implementing the plan and responding to

disaster is an organization-wide efort

Plan development requires many types of

knowledge and skills

Every organization-wide efort is laden with

social and political obstacles that need to be

addressed

Each step of planning is interrelated and builds

upon the others

The disaster recovery planning team is

responsible for developing the plan

(17)

ESTABLISHING CONTINUITY

AND RECOVERY FUNCTION

Disaster recovery function consists of

the people, departments, and support

organizations that implement the

plan and facilitate disaster recovery

How this function is organized depends

on



_{The geographical dispersal of facilities within an}

organization

(18)

STAFF OF AN ORGANIZATION’S

DISASTER RECOVERY FUNCTION

A centralized authority or group



_{Coordinates the development of disaster recovery}

plans



_{Plays a role in disaster response and recovery}

Managers and staf in functional

departments have enterprise-wide

roles in disaster response and

recovery

Department managers and

representatives from business units

have roles in disaster response and

recovery to ensure the continued

function of their business units

(19)

UNDERSTANDING THE STEPS OF

DISASTER RECOVERY PLANNING

Disaster recovery planning consists of

eight major steps

Smaller organizations may be able to

develop and document a plan in a few

months

In larger organizations, initial planning

can take many months and

sometimes years

(20)

STEP ONE

The frst step is organizing the disaster

recovery planning team

The team must be a well-rounded group that

represents all the functions of an

organization

Requires a high-level manager as a

champion

Ideally, the champion should be the CEO or a

high-level manager designated by the CEO

(21)

STEP ONE

The team must also have a designated leader,

or two people who act as co-leaders

Each participating department should assign

a primary representative and an alternate

to the team for continuity

The team should be trained in disaster

recovery planning

Once in place, it should establish a schedule

of activities, including meeting times and

dates for completing the eight steps of

planning

(22)

STEP TWO

Assessing the risk that an enterprise faces is

the next step

A business impact analysis is a method of

assessing risks and determining the

potential economic loss that could occur as

a result of these risks



_{All business processes must be identifed and analyzed}



_{The planning team should review legal and contractual}

requirements to determine the consequences of business

disruption



The results help guide disaster recovery planning and help

the team develop procedures for recovering from various

types of incidents

(23)

(24)

STEP THREE

The third step is establishing the roles that each

department, business partner, and outside

service organization plays in disaster recovery

The planning team determines the contribution

that each department can make to the plan

and disaster recovery

Organization with multiple locations must

identify local departments and employees who

can participate in disaster recovery planning

The planning team also determines the role that

other organizations should play in the plan

(25)

STEP FOUR

Developing actual disaster recovery policies

and procedures is the next step

Disaster recovery policies are the guidelines

that govern the development of disaster

recovery procedures

Disaster recovery procedures are step-by-step

methods designed to restore an

organizational function or business process

Developing policies and procedures to recover

from disasters requires attention to detail

and thorough analysis

(26)

STEP FIVE

The ffth step of the disaster recovery plan is

to document the policies and procedures

developed in the previous step

Part of this documentation is done in

conjunction with drafting, reviewing, and

approving policies and procedures

The approved documentation is included in

the actual disaster recovery plan

A group must be established to manage

documentation and the cycles of reviews,

approvals, and updates

The document must include all contact

information

(27)

STEP SIX

Implementing the disaster recovery plan is

During this step



_{The fnal plan is distributed to all of the departments,}

organizations, and employees involved in disaster response

and recovery



The planning team begins to intensify the internal and

external awareness programs to ensure that all parties know

about the plan



Executives are briefed on the plan and their roles in disaster

response and recovery

(28)

STEP SEVEN

The next step is to test and rehearse parts of

the plan, and eventually to run a live

simulation of a disaster

A disaster recovery rehearsal is a live

simulation in which all departments and

support organizations run through the

entire disaster recovery process, just as

they would during an actual disaster

Managers in eight of every 10 organizations

surveyed think that testing and rehearsing

disaster recovery plans is benefcial

S U M B E R K E P U S T A K A A N : W W W . K U R O S K I . N E T / D A 2 0 1 / D I S A

S T E R R E C O V E R Y / C H A P T E R % 2 0 0 1 . P P T

(29)

(30)

STEP EIGHT

The fnal step is often called the maintenance

phase

Once the plan is developed and tested, the

planning team must continually



_{Assess the emergence of new threats}



_{Adjust for changes in organizational structure}



_{Determine the impact of new technology on recovery procedures}

In many industries, planning teams may also need

to monitor changes in laws and regulations that

may afect their disaster recovery requirements

When procedures are changed and documentation

is updated, training requirements and staf skills

must be updated as well

(31)

(32)

ROLE OF IT AND NETWORK

MANAGEMENT IN

DISASTER RECOVERY

Most organizations rely heavily on their

computer systems and

communications networks

The IT and network management in

every organization have essential

roles in disaster recovery planning

and response

Knowledgeable representatives from IT

and network management need to be

assigned to the team

(33)

IT REPRESENTATION

At least one representative is needed for each

of the following functions:o



_{Data center operations}



_{Network management}



_{Desktop computing}



_{Voice communications}

At least one person is needed for each major

IT application, including



_{Financial management support}



_{Supply chain systems}

(34)

IT REPRESENTATION

During risk assessment and business

impact analysis, IT and network

managers need to



_{Help the team answer critical questions about the}

potential consequences of system downtime



_{Assist in developing and documenting procedures}

for end-user departments and the IT departments

that facilitate disaster response and recovery

(35)

IT REPRESENTATION

During risk assessment and

business impact analysis, IT and

network managers need to



_{Help develop and deliver training to}

department managers and employees who

will assist in recovery procedures for computer

systems and networks



_{Help test and rehearse procedures to ensure}

(36)

IT MANAGERS ROLE

IT and network managers have a key

role in supporting and managing the

ongoing disaster recovery plan

Plans and procedures must be updated

IT and network managers must

determine



_{How each new upgrade or additional application}

afects these plans and procedures, then



_{Inform the staf who maintain disaster recovery}

documents of the necessary changes to keep the

plan current



_{Develop new training materials as needed}

(37)

CHAPTER SUMMARY

Disaster recovery planning is the process of

assessing risks that an organization faces,

then developing procedures to return to

normal operations quickly

No of-the-shelf disaster recovery plan can

possibly meet the needs of all organizations

Understanding the basic principles of disaster

(38)

CHAPTER SUMMARY

The disaster recovery function

consists of the people,

departments, and support

organizations that implement the

disaster recovery plan and

facilitate recovery

There are eight steps in the process

of developing a disaster recovery

plan

Most organizations rely heavily on

computer systems and

communication